dependency-management

To audit dependencies for security vulnerabilities, you generate an inventory across multi-language projects and apply risk scoring to identify vulnerable or deprecated items. It coordinates advisories and lockfiles to reduce supply-chain risk.

The best way to plan a dependency upgrade is to assess current dependencies, identify deprecated items, and generate an actionable upgrade plan. This approach coordinates build failures and advisories to unblock upgrades safely.

Yes, you can use Renovate and Dependabot to enforce dependency update policies. The skill supports integration with these tools, alongside npm audit, to apply governance, set update cadences, and automate risk threshold enforcement.

You define update cadences and risk thresholds for dependency governance by applying policy enforcement across projects. This establishes consistent dependency hygiene by coordinating upgrade workflows with advisories and build failures.

Yes, dependency management works with multi-language projects using various package managers. It identifies and manages third-party dependencies across diverse codebases to reduce security and supply-chain risk consistently.